Privacy policy

Controller

The controller within the meaning of Art. 4(7) GDPR is:

Quantum Otter
Christian Fischer
Ismaninger Str. 3b
85452 Moosinning
Germany
Email: kontakt@outshoutsign.com

Hosting and server log files

This website is delivered via Cloudflare Workers, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare acts as a processor on our behalf pursuant to Art. 28 GDPR. When the website is accessed, technically necessary data is processed, in particular the IP address, date and time of access, the file requested, the volume of data transferred, the referrer and details of the browser and operating system.

This processing is necessary to provide the website securely and reliably and is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR. The access data arises at Cloudflare; we do not store or analyse it any further. Retention follows Cloudflare’s own periods and is limited to what is necessary for operation and security.

Processing may take place in the USA. Cloudflare is certified under the EU-US Data Privacy Framework; the European Commission’s standard contractual clauses apply in addition. A copy of these safeguards is available at https://www.cloudflare.com/cloudflare-customer-dpa/; on request we will also provide it to you directly.

Using the contact form

When you submit the contact form, the details you entered are transmitted to our server and delivered to us by email. We process them to handle your enquiry on the basis of Art. 6(1)(b) GDPR — for enquiries relating to a contract — or on the basis of our legitimate interest in responding to business enquiries pursuant to Art. 6(1)(f) GDPR.

Providing this information is voluntary. There is no legal or contractual obligation to provide it; without a name, an email address and a description of your enquiry, however, we cannot answer it.

For delivery we use Amazon Simple Email Service, a service of Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. The provider acts as a processor pursuant to Art. 28 GDPR; the AWS Data Processing Addendum forms part of the customer agreement. Processing takes place in the Frankfurt region. Should a transfer to the USA nevertheless occur in an individual case, the European Commission’s standard contractual clauses are incorporated into the AWS Service Terms, and Amazon Web Services is additionally certified under the EU-US Data Privacy Framework.

Your enquiry is not stored permanently on our server: it is processed solely for delivery and discarded afterwards. To prevent automated bulk submissions, we keep a shortened hash of your IP address — generated using a secret key — together with the number of submissions for no longer than one hour. We do not store the IP address itself, the hash does not allow us to reconstruct it, and the entry is deleted automatically once the hour has elapsed. The legal basis is our legitimate interest in operating the form free of abuse pursuant to Art. 6(1)(f) GDPR. No cookies are set in the process, and no information is stored on or read from your device.

To prevent spam, we compare the text with known spam patterns during processing. Messages identified as spam are not delivered. To assess effectiveness and diagnose errors, we record technical result events at Cloudflare, such as “sent”, “spam detected” or “technical error”. These events generated by us contain no form content, names, email addresses or IP addresses. Cloudflare adds technical metadata such as timestamps and execution identifiers and retains the logs for three days or, depending on the plan, up to seven days. The legal basis is our legitimate interest in the secure and reliable operation of the form pursuant to Art. 6(1)(f) GDPR.

The delivered email then remains in our mailbox; its retention and deletion are covered by the following section.

Contact by email

If you contact us by email, we process the details you provide solely to handle your enquiry. We retain the correspondence for as long as is necessary to handle it or as required by statutory retention periods, and delete it afterwards.

Our email mailbox is operated by Heinlein Hosting GmbH, Schwedter Straße 8/9A, 10119 Berlin, Germany, under the mailbox.org brand. The provider processes the contents of incoming messages as a processor pursuant to Art. 28 GDPR; a corresponding agreement is in place. Processing takes place exclusively in Germany.

No cookies, no tracking

This website sets no cookies and uses no analytics, tracking or advertising services. There is no profiling and no automated decision-making.

Fonts are served exclusively from our own server. No connection to Google Fonts or other third parties is established.

Encryption

For security reasons this website uses TLS encryption. You can recognise an encrypted connection in your browser’s address bar.

Your rights

You have the right at any time to obtain information about the data stored about you (Art. 15 GDPR), to rectification (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR) and to data portability (Art. 20 GDPR).

You may withdraw any consent given at any time with effect for the future (Art. 7(3) GDPR). An informal message to kontakt@outshoutsign.com is sufficient to exercise your rights.

Right to object

Where we process personal data on the basis of a legitimate interest pursuant to Art. 6(1)(f) GDPR, you have the right to object to that processing at any time on grounds relating to your particular situation (Art. 21 GDPR). An informal message to kontakt@outshoutsign.com is sufficient. We will then stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.

Right to lodge a complaint

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority competent for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany. You may equally contact the supervisory authority of your place of residence or place of work.